MIMECAST-CG Practice Test

MIMECAST-CG practice test: what's covered

• Cloud Gateway
• Core Policies
• TTP
• DLP
• Continuity
• Archiving

Free MIMECAST-CG sample questions

1. Mimecast Email Security (Cloud Gateway) is BEST described as:

   • A. An endpoint agent
   • B. A cloud-based secure email gateway that inspects inbound/outbound/internal email — applying security, policy, continuity, and archiving — in front of the organization's mail platform (e.g., M365/Exchange)
   • C. A network firewall
   • D. A BGP router
   Show answer

   Correct: B. Mimecast is a cloud secure email gateway (SEG): MX points to Mimecast, which filters/secures mail and relays to M365/Exchange. It adds threat protection, policy, email continuity, and archiving on top of the mail platform. Not an endpoint/firewall.

2. The Mimecast Administration Console is used to:

   • A. Configure BGP
   • B. Centrally manage the service — policies, directories, mail flow, TTP, DLP, continuity, archiving, message tracking, and reporting — from one web console
   • C. Manage printers
   • D. Edit endpoint registries
   Show answer

   Correct: B. The Administration Console is the single management plane for Mimecast: define policies, manage directories/groups, configure mail flow and TTP/DLP, run message tracking, and view reports. Knowing console navigation is foundational to administration.

3. Which TWO directions of email can Mimecast inspect? (Choose 2)

   • A. Inbound (external → internal) and outbound (internal → external)
   • B. Internal-to-internal (mail between internal users, where supported)
   • C. BGP-to-BGP
   • D. Printer-to-printer
   Show answer

   Correct: A and B. Mimecast inspects inbound, outbound, and (with internal email protection) internal mail — important because a compromised internal account can send internal phishing/malware. BGP/printer flows are not email. Internal protection catches lateral email threats.

4. Administrative roles in Mimecast should follow:

   • A. Everyone is full admin
   • B. Least privilege / role-based access — scope admins to functions (e.g., help-desk for message release, policy admin, read-only auditor) with per-user accounts and strong auth, since the console controls all mail security
   • C. Shared logins
   • D. No access control
   Show answer

   Correct: B. Mimecast supports RBAC roles — scope to function (help-desk release, full admin, read-only), per-user accounts, MFA. The console is powerful (could exfiltrate archived mail or weaken protection), so least privilege + accountability are essential.

5. Why does Mimecast emphasize protecting against INTERNAL email threats too?

   • A. Internal mail is always safe
   • B. A compromised internal account (or insider) can send phishing/malware to colleagues that never crosses the perimeter gateway — internal email protection catches these lateral threats
   • C. Internal mail uses BGP
   • D. It does not
   Show answer

   Correct: B. Once an account is compromised, attackers send internal phishing/malware to coworkers — traffic that may never traverse the inbound gateway. Internal email protection scans internal/outbound mail to catch this lateral spread. A key modern gap.

Last updated: 2026-10-19

MIMECAST-CG practice test FAQ